Listof Domains
Query
//Using make_set to build a list of unique user domains from the UserPrincipalName column
SigninLogs
| extend UserDomains = split(UserPrincipalName,'@')[1]
| summarize UserDomains = make_set(UserDomains)Explanation
The query is using the "make_set" function to create a list of unique user domains from the "UserPrincipalName" column in the "SigninLogs" table. It splits the email addresses at the "@" symbol and then summarizes the unique domains using the "make_set" function.
Details
Rod Trent
Released: September 19, 2022
Tables
SigninLogs
Keywords
SigninLogsUserPrincipalNameUserDomains
Operators
extendsplitsummarizemake_set